Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fwff-cx6h-wxmq

Опубликовано: 29 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific requests to the dcmqrdb program will incur a double free. An attacker can use it to launch a DoS attack.

DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific requests to the dcmqrdb program will incur a double free. An attacker can use it to launch a DoS attack.

EPSS

Процентиль: 28%
0.00097
Низкий

7.5 High

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 3 лет назад

DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific requests to the dcmqrdb program will incur a double free. An attacker can use it to launch a DoS attack.

CVSS3: 7.5
nvd
около 3 лет назад

DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific requests to the dcmqrdb program will incur a double free. An attacker can use it to launch a DoS attack.

CVSS3: 7.5
debian
около 3 лет назад

DCMTK through 3.6.6 does not handle memory free properly. The object i ...

CVSS3: 7.5
fstec
почти 4 года назад

Уязвимость библиотеки для работы с форматом DICOM DCMTK, связанная с повторным освобождением памяти, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
redos
около 4 лет назад

Множественные уязвимости dcmtk

EPSS

Процентиль: 28%
0.00097
Низкий

7.5 High

CVSS3

Дефекты

CWE-415